FIN6 added

This commit is contained in:
Alexandre Dulaunoy 2016-09-20 07:47:09 +02:00
parent c2b0c1fe0c
commit a4e6ca1c5d

View file

@ -272,7 +272,8 @@
"synonyms": [ "synonyms": [
"APT 17", "APT 17",
"Deputy Dog", "Deputy Dog",
"Group 8" "Group 8",
"APT17"
] ]
}, },
{ {
@ -285,7 +286,8 @@
"Dynamite Panda", "Dynamite Panda",
"TG-0416", "TG-0416",
"APT 18", "APT 18",
"SCANDIUM" "SCANDIUM",
"APT18"
] ]
}, },
{ {
@ -944,6 +946,11 @@
"value": "Suckfly", "value": "Suckfly",
"description": "Suckfly is a China-based threat group that has been active since at least 2014", "description": "Suckfly is a China-based threat group that has been active since at least 2014",
"refs": ["http://www.symantec.com/connect/blogs/suckfly-revealing-secret-life-your-code-signing-certificates"] "refs": ["http://www.symantec.com/connect/blogs/suckfly-revealing-secret-life-your-code-signing-certificates"]
},
{
"value": "FIN6",
"description": "FIN is a group targeting financial assets including assets able to do financial transaction including PoS.",
"refs": ["https://www2.fireeye.com/rs/848-DID-242/images/rpt-fin6.pdf"]
} }
] ]
} }